Home

[OFFICE 365 - EXCHANGE] Monitor in/out mails senders

%3CLINGO-SUB%20id%3D%22lingo-sub-1031544%22%20slang%3D%22en-US%22%3E%5BOFFICE%20365%20-%20EXCHANGE%5D%20Monitor%20in%2Fout%20mails%20senders%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1031544%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20currently%20trying%20to%20establish%20statistics%20regarding%20the%20email%20activities%20on%20Office%20365.%3C%2FP%3E%3CP%3EI%20spent%20some%20time%20trying%20to%20figure%20out%20how%20to%20access%20the%20sender%20%2F%20receiver%20email%20or%20account%20(and%20other%20related%20data).%20I%20didn't%20find%20anything%20concluant%20within%20the%20%3CEM%3EOfficeActivity%3C%2FEM%3E%20logs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDid%20you%20try%20to%20achieve%20this%20%3F%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20answer.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1031831%22%20slang%3D%22en-US%22%3ERe%3A%20%5BOFFICE%20365%20-%20EXCHANGE%5D%20Monitor%20in%2Fout%20mails%20senders%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1031831%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F314167%22%20target%3D%22_blank%22%3E%40ClementBonnet%3C%2FA%3E%26nbsp%3BHave%20you%20looked%20at%20the%20Office%20365%20Workbook%3F%26nbsp%3B%20It%20may%20not%20be%20100%25%20what%20you%20are%20looking%20for%20but%20it%20should%20give%20you%20a%20hint%20of%20how%20to%20get%20what%20you%20want%20if%20it%20doesn't.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1033098%22%20slang%3D%22en-US%22%3ERe%3A%20%5BOFFICE%20365%20-%20EXCHANGE%5D%20Monitor%20in%2Fout%20mails%20senders%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1033098%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F46875%22%20target%3D%22_blank%22%3E%40Gary%20Bushey%3C%2FA%3E%26nbsp%3BThanks%20for%20your%20answer!%3CBR%20%2F%3EI%20did%20look%20at%20Office%20365%20Workbook%2C%20but%20didn't%20find%20anything%20regarding%20email%20data.%20There%20are%20only%20information%20on%20the%20mailbox.%3C%2FP%3E%3CP%3EI%20wonder%20if%20sender%2Freceiver%20(and%20other%20data)%20are%20actually%20transmitted%20from%20Office%20365%20to%20Sentinel%20through%20the%20Office%20365%20connector.%20I%20try%20to%20figure%20out%20how%20to%20do%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1034070%22%20slang%3D%22fr-FR%22%3ERe%3A%20%5BOFFICE%20365%20-%20EXCHANGE%5D%20Monitor%20in%2Fout%20mails%20senders%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1034070%22%20slang%3D%22fr-FR%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F46875%22%20target%3D%22_blank%22%3Ebushey%20%40Gary%3C%2FA%3E%26nbsp%3BThank%20you%20for%20your%20answer.%20I'm%20I'm%20also%20interesting.%20I%20think%2C%20what%20we%20would%20like%20it's%20to%20c%3CSPAN%3Eollects%20Message%20Trace%20data%20from%20Microsoft%20Office%20365%20including%20the%20following%3A%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3ESender%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3E%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3ESubject%3C%2FSPAN%3E%3CBR%20%2F%3ETo%3CSPAN%3EIP%20Address%3C%2FSPAN%3E%3CBR%20%2F%3EFrom%20IP%3CSPAN%3EAddress%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3ESize%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3EDate%20Received%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3ELooks%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1041160%22%20slang%3D%22en-US%22%3ERe%3A%20%5BOFFICE%20365%20-%20EXCHANGE%5D%20Monitor%20in%2Fout%20mails%20senders%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1041160%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F469608%22%20target%3D%22_blank%22%3E%40thotho%3C%2FA%3E%26nbsp%3B%3A%20supporting%20email%20flow%20logs%20is%20on%20our%20roadmap.%20We%20hope%20to%20address%20your%20need%20soon.%3C%2FP%3E%3C%2FLINGO-BODY%3E
ClementBonnet
Occasional Contributor

Hello,

 

I am currently trying to establish statistics regarding the email activities on Office 365.

I spent some time trying to figure out how to access the sender / receiver email or account (and other related data). I didn't find anything concluant within the OfficeActivity logs.

 

Did you try to achieve this ?

Thank you for your answer.

4 Replies

@ClementBonnet Have you looked at the Office 365 Workbook?  It may not be 100% what you are looking for but it should give you a hint of how to get what you want if it doesn't.

@Gary Bushey Thanks for your answer!
I did look at Office 365 Workbook, but didn't find anything regarding email data. There are only information on the mailbox.

I wonder if sender/receiver (and other data) are actually transmitted from Office 365 to Sentinel through the Office 365 connector. I try to figure out how to do this.

@Gary Bushey Thank you for your answer.I'm I'm also interesting. I think, what we would like it's to collects Message Trace data from Microsoft Office 365 including the following:
Sender
Recipient
Subject
To IP Address
From IP Address
Size
Date Received

 

Regards

@thotho : supporting email flow logs is on our roadmap. We hope to address your need soon.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
46 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies